This Privacy Policy has been developed with the security of your personal data in mind. The protection of your personal data and any information processed or generated is a priority of Polska Grupa Zbrojeniowa S.A., with its registered office in Radom, ul. Aleksego Grobickiego 23 (hereinafter referred to as ‘PGZ S.A.’). We make every effort to ensure that the services we provide are of the highest standard. We feel particularly responsible for the security of personal data processed by us in connection with our activities. In this Policy, we inform you of the legal basis for the processing of personal data, the ways in which we collect and use personal data and the rights of data subjects in connection with the use of the Website.
What do we mean by personal data and how we process it?
Personal data is any information relating to an identified or identifiable natural person. Individual information which, when combined, can lead to the identification of an individual is also personal data. By processing personal data, we mean performing any action on personal data, whether or not carried out by automated means (e.g. collection, storage, recording, organisation, modification, viewing, use, disclosure, restriction, deletion or destruction).
Who is the controller of your personal data?
The controller of your personal data, i.e. the entity that decides on the purposes and methods of processing your personal data, is PGZ S.A. with its registered office in Radom (26-617), ul. Aleksego Grobickiego 23. You can contact the data controller at the following address: ul. Nowy Świat 4a, 00-497 Warsaw and by email at: [email protected].
To contact the PGZ S.A. Data Protection Officer or to inquire about your personal data, please send an email to: [email protected] or contact us by post at: ul. Nowy Świat 4a, 00-497 Warsaw.
What data do we process?
We process the personal data that you provide or make available to us in the course of browsing our website and using its functionality. We also perform automated analysis of your activity on our website. The personal information we collect is provided by you voluntarily, but is necessary for you to use the functionality of our website, such as answering questions you ask using the contact form or the website’s error report form. We collect only the data necessary to carry out and provide the services contained in the forms available on our websites to the following extent:
- contact information (such as name, phone number, email address);
- technical and site search data, which may be personal data (such as IP addresses, cookie IDs, browsing history data, information about the user’s device, etc.).
What is the purpose of the processing of the personal data provided by you and the legal basis and reasons for doing so?
- Handling the contact form
The data controller offers the possibility to contact them by means of an electronic contact form. Use of the form requires the provision of the personal data necessary to establish contact and respond to your request. The provision of data marked as obligatory is necessary to receive and process the request, while the provision of other data is optional. Personal data will be processed in order to identify the sender and to process the request sent via the form provided – the legal basis for processing is the legitimate interest of the controller (Article 6(1)(f) of the GDPR1). With regard to personal data provided on an optional basis, the legal basis for processing is consent (Article 6(1)(a) of the GDPR).
- Handling the website error reporting form
The controller provides the user with the possibility to report an error on the website. The use of the form requires the user to provide the data necessary to establish contact and identify the detected error – the legal basis for processing is the controller’s legitimate interest (Article 6(1)(f) of the GDPR). With regard to personal data provided on an optional basis, the legal basis for processing is consent (Article 6(1)(a) of the GDPR).
- Keeping statistics
The controller collects statistical data related to the operation of the website in order to analyse users’ activities and preferences, which is related to improving the functioning of the website. The legal basis for the processing is the legitimate interest of the controller (Article 6(1)(f) of the GDPR). For details of the statistics kept on the website, please refer to the Cookie Policy.
For how long do we process personal data? What are the criteria for determining such periods?
The period for which personal data is processed depends on the purposes for which it was collected and on the legal provisions that impose certain legal obligations on PGZ S.A. in this respect. PGZ S.A. may process personal data until an effective objection to the processing of the data is made in cases where the legal basis for the processing is the legitimate interest of the controller (Article 6(1)(f) of the GDPR), or until the explicit consent is withdrawn.
The period for processing personal data may be extended in cases where the processing is necessary for the establishment and investigation of claims or the defence of claims, and thereafter only if and to the extent required by law.
What rights do you have as a data subject?
In accordance with the applicable legislation, you have the following rights in relation to the processing of your personal data by PGZ S. A.:
- the right to access your data, including the right to obtain a copy of the data;
- the right to request rectification of your data;
- the right to have your data erased (right to be forgotten);
- the right to lodge a complaint with the supervisory authority for the protection of personal data, which in Poland is the President of the Office for the Protection of Personal Data – https://www.uodo.gov.pl/pl (if you have any comments or concerns, we encourage you to contact us in advance);
- the right to restrict data processing;
- the right to object (to the processing of data in the legitimate interest of the data controller).
If your data is processed on the basis of consent, you may also exercise:
- the right to withdraw consent. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent prior to its withdrawal.
In order to exercise the above-mentioned rights, please write to: [email protected] or by post to: ul. Nowy Świat 4a, 00-497 Warsaw.
Who do we share your data with?
Your data may be shared with entities that process personal data on behalf of the controller, primarily IT service providers and marketing agencies. These entities process data on the basis of a contract with the controller and only in accordance with the controller’s instructions. In such cases, third parties are required to maintain the confidentiality and security of the information and it is verified that they take appropriate measures to protect personal data.
Your data may also be made available to bodies entitled to receive it under applicable law, such as law enforcement agencies.
The processing of your personal data by PGZ S.A.’s partners takes place on the basis of your voluntary consent. The partners carry out automated analysis of activity on the website and use cookies for this purpose.
List of trusted partners:
Matomo – (for more information see: www.matomo.org).
Cookies
The controller uses cookies as part of the website. The purposes and rules for the use of cookies can be found in the Cookie Policy.
Social networks
The data controller processes personal data of users who visit the data controller’s profiles on social networks (Facebook, YouTube, Instagram, Twitter, LinkedIn). This data is processed solely for the purpose of managing the profile, including informing users about the controller’s activities and promoting various events, services and products. The controller’s legal basis for processing personal data for this purpose is its legitimate interest (Article 6(1)(f) of the GDPR) in promoting its own brand.
Separate privacy policies and procedures apply to the above services. Please refer to the separate sub-pages of these services for details.
Automated decision making
Your personal data will not be used for the purpose of automated decision-making, including profiling, in such a way that any decision which produces legal effects for you or which is similarly likely to significantly affect you could be taken as a result of such automated processing.
Changes to the Privacy Policy
PGZ S.A. reserves the right to make changes to the Privacy Policy at any time in order to ensure that it meets current legal requirements. This shall also apply in the event that the Privacy Policy needs to be amended to cover new or modified functionalities and services of the PGZ S.A. website.